[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 78.854775][ T26] audit: type=1800 audit(1560682075.133:33): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 78.876709][ T26] audit: type=1800 audit(1560682075.133:34): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 81.854893][ T26] audit: type=1400 audit(1560682078.133:35): avc: denied { map } for pid=9635 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts. [ 88.569966][ T26] audit: type=1400 audit(1560682084.843:36): avc: denied { map } for pid=9647 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/16 10:48:05 parsed 1 programs [ 89.566349][ T26] audit: type=1400 audit(1560682085.843:37): avc: denied { map } for pid=9647 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16226 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/06/16 10:48:08 executed programs: 0 [ 92.118803][ T9670] IPVS: ftp: loaded support on port[0] = 21 [ 92.119493][ T9669] IPVS: ftp: loaded support on port[0] = 21 [ 92.154819][ T9673] IPVS: ftp: loaded support on port[0] = 21 [ 92.161360][ T9675] IPVS: ftp: loaded support on port[0] = 21 [ 92.203760][ T9674] IPVS: ftp: loaded support on port[0] = 21 [ 92.279135][ T9677] IPVS: ftp: loaded support on port[0] = 21 [ 92.443141][ T9670] chnl_net:caif_netlink_parms(): no params data found [ 92.557976][ T9675] chnl_net:caif_netlink_parms(): no params data found [ 92.612264][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.620004][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.629124][ T9670] device bridge_slave_0 entered promiscuous mode [ 92.639736][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.646890][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.654971][ T9670] device bridge_slave_1 entered promiscuous mode [ 92.685322][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 92.733569][ T9670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.742035][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 92.785891][ T9670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.805669][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.812866][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.821219][ T9675] device bridge_slave_0 entered promiscuous mode [ 92.852958][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 92.868167][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.875575][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.883555][ T9675] device bridge_slave_1 entered promiscuous mode [ 92.910576][ T9670] team0: Port device team_slave_0 added [ 92.922970][ T9670] team0: Port device team_slave_1 added [ 92.960730][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968440][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979558][ T9669] device bridge_slave_0 entered promiscuous mode [ 92.992314][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.999570][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.007826][ T9669] device bridge_slave_1 entered promiscuous mode [ 93.062603][ T9669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.079294][ T9675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.110260][ T9669] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.133674][ T9675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.187800][ T9670] device hsr_slave_0 entered promiscuous mode [ 93.244010][ T9670] device hsr_slave_1 entered promiscuous mode [ 93.315474][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.322620][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.330732][ T9674] device bridge_slave_0 entered promiscuous mode [ 93.359140][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.367246][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.375304][ T9673] device bridge_slave_0 entered promiscuous mode [ 93.382808][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 93.394717][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.401816][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.411824][ T9674] device bridge_slave_1 entered promiscuous mode [ 93.420900][ T9669] team0: Port device team_slave_0 added [ 93.436177][ T9675] team0: Port device team_slave_0 added [ 93.442206][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.449357][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.457379][ T9673] device bridge_slave_1 entered promiscuous mode [ 93.503201][ T9669] team0: Port device team_slave_1 added [ 93.511142][ T9675] team0: Port device team_slave_1 added [ 93.535814][ T9673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.547001][ T9674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.577403][ T9673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.588295][ T9674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.666888][ T9675] device hsr_slave_0 entered promiscuous mode [ 93.714003][ T9675] device hsr_slave_1 entered promiscuous mode [ 93.826163][ T9669] device hsr_slave_0 entered promiscuous mode [ 93.883830][ T9669] device hsr_slave_1 entered promiscuous mode [ 93.946546][ T9673] team0: Port device team_slave_0 added [ 93.975869][ T9673] team0: Port device team_slave_1 added [ 93.981760][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.989297][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.998248][ T9677] device bridge_slave_0 entered promiscuous mode [ 94.007167][ T9674] team0: Port device team_slave_0 added [ 94.023226][ T9674] team0: Port device team_slave_1 added [ 94.048366][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.056351][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.066676][ T9677] device bridge_slave_1 entered promiscuous mode [ 94.127643][ T9674] device hsr_slave_0 entered promiscuous mode [ 94.183926][ T9674] device hsr_slave_1 entered promiscuous mode [ 94.261899][ T9677] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 94.306009][ T9673] device hsr_slave_0 entered promiscuous mode [ 94.373788][ T9673] device hsr_slave_1 entered promiscuous mode [ 94.433011][ T9677] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 94.493056][ T9677] team0: Port device team_slave_0 added [ 94.501172][ T9677] team0: Port device team_slave_1 added [ 94.567067][ T9677] device hsr_slave_0 entered promiscuous mode [ 94.613789][ T9677] device hsr_slave_1 entered promiscuous mode [ 94.730574][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.824464][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.833309][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.851603][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.865804][ T9670] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.887291][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.921491][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.929991][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.939053][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.947965][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.956785][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.964316][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.980328][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.000183][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.007351][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.030955][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.053073][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.064907][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.074807][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.083255][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.090407][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.099118][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.107945][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.117052][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.126022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.135064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.144045][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.152424][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.159550][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.167566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.175968][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.183853][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.191867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.200030][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.208206][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.224144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.233063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.257232][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.272455][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.281708][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.288851][ T9683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.301688][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.317065][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.329731][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.338405][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.347079][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.356876][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.365018][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.381950][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.401618][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.410366][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.420234][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.429787][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.441348][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.450206][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.459092][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.467702][ T3145] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.474815][ T3145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.482619][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.492196][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.501275][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.509280][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.519780][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.547733][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.557423][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.566167][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.573293][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.581383][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.589924][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.598720][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.607520][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.616191][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.623272][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.639315][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.648638][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.657154][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.664255][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.671932][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.680817][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.689209][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.698930][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.716704][ T9669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.753996][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.762525][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.771316][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.780649][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.789550][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.798063][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.805162][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.813676][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.822385][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.831183][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.840146][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.848815][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.857155][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.864264][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.871839][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.880562][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.889161][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.896254][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.904056][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.914135][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.922247][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.930339][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.984520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.995238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.003890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.012574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.021003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.029298][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.037700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.046690][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.055428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.064336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.071384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.079663][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.088828][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.097551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.106961][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.122103][ T9675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.146699][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.157417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.167940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.177569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.193176][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.226304][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.242835][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.252490][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.269431][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.278368][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.287605][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.298121][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.306539][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.315927][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.324933][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.341570][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.369936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.381275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.391804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.409072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.418695][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.428040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.443136][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.451847][ T9673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.477156][ T26] audit: type=1400 audit(1560682092.753:38): avc: denied { associate } for pid=9670 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 96.484510][ T9674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.519478][ T9674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.532771][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.548555][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.558042][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.574780][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.588306][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.597580][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.611210][ T9677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.650607][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.682665][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.710665][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.766302][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.819281][ T26] audit: type=1400 audit(1560682093.083:40): avc: denied { map_read map_write } for pid=9708 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2019/06/16 10:48:13 executed programs: 9 [ 96.976123][ T26] audit: type=1400 audit(1560682093.073:39): avc: denied { map_create } for pid=9702 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 2019/06/16 10:48:18 executed programs: 186 [ 103.724135][T10371] ================================================================== [ 103.724141][T10371] BUG: KASAN: slab-out-of-bounds in class_equal+0x40/0x50 [ 103.724148][T10371] Read of size 8 at addr ffff88808601f1a0 by task syz-executor.1/10371 [ 103.724150][T10371] [ 103.724156][T10371] CPU: 0 PID: 10371 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #26 [ 103.724163][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.724166][T10371] Call Trace: [ 103.724169][T10371] [ 103.724173][T10371] Allocated by task 9639: [ 103.724176][T10371] save_stack+0x23/0x90 [ 103.724181][T10371] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 103.724185][T10371] kasan_slab_alloc+0xf/0x20 [ 103.724189][T10371] kmem_cache_alloc_node+0x131/0x710 [ 103.724192][T10371] __alloc_skb+0xd5/0x5e0 [ 103.724196][T10371] netlink_dump+0x312/0xfb0 [ 103.724200][T10371] netlink_recvmsg+0xb9f/0xf10 [ 103.724203][T10371] sock_recvmsg+0xce/0x110 [ 103.724207][T10371] ___sys_recvmsg+0x271/0x5a0 [ 103.724211][T10371] __sys_recvmsg+0x102/0x1d0 [ 103.724214][T10371] __x64_sys_recvmsg+0x78/0xb0 [ 103.724218][T10371] do_syscall_64+0xfd/0x680 [ 103.724223][T10371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.724225][T10371] [ 103.724229][T10371] Freed by task 9639: [ 103.724232][T10371] save_stack+0x23/0x90 [ 103.724236][T10371] __kasan_slab_free+0x102/0x150 [ 103.724240][T10371] kasan_slab_free+0xe/0x10 [ 103.724244][T10371] kmem_cache_free+0x86/0x260 [ 103.724247][T10371] kfree_skbmem+0xc5/0x150 [ 103.724251][T10371] consume_skb+0xea/0x380 [ 103.724255][T10371] skb_free_datagram+0x1b/0x100 [ 103.724258][T10371] netlink_recvmsg+0x6c6/0xf10 [ 103.724262][T10371] sock_recvmsg+0xce/0x110 [ 103.724266][T10371] ___sys_recvmsg+0x271/0x5a0 [ 103.724270][T10371] __sys_recvmsg+0x102/0x1d0 [ 103.724273][T10371] __x64_sys_recvmsg+0x78/0xb0 [ 103.724277][T10371] do_syscall_64+0xfd/0x680 [ 103.724281][T10371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.724284][T10371] [ 103.724290][T10371] The buggy address belongs to the object at ffff88808601f080 [ 103.724295][T10371] which belongs to the cache skbuff_head_cache of size 224 [ 103.724301][T10371] The buggy address is located 64 bytes to the right of [ 103.724306][T10371] 224-byte region [ffff88808601f080, ffff88808601f160) [ 103.724310][T10371] The buggy address belongs to the page: [ 103.724318][T10371] page:ffffea00021807c0 refcount:1 mapcount:0 mapping:ffff88821baabb40 index:0xffff88808601fe40 [ 103.724330][T10371] flags: 0x1fffc0000000200(slab) [ 103.724337][T10371] raw: 01fffc0000000200 ffffea0002676008 ffffea000267c048 ffff88821baabb40 [ 103.724343][T10371] raw: ffff88808601fe40 ffff88808601f080 0000000100000001 0000000000000000 [ 103.724348][T10371] page dumped because: kasan: bad access detected [ 103.724351][T10371] [ 103.724356][T10371] Memory state around the buggy address: [ 103.724362][T10371] ffff88808601f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.724368][T10371] ffff88808601f100: fb fb fb fb fb fb f1 f1 f1 f1 00 f2 f2 f2 00 f2 [ 103.724374][T10371] >ffff88808601f180: f2 f2 fc fc fc fc 00 00 00 f3 f3 f3 f3 f3 fb fb [ 103.724378][T10371] ^ [ 103.724384][T10371] ffff88808601f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.724390][T10371] ffff88808601f280: fb fb fb fb fc 00 00 00 00 00 00 00 00 fc fc fc [ 103.724396][T10371] ================================================================== [ 103.724401][T10371] Disabling lock debugging due to kernel taint [ 103.724406][T10371] Kernel panic - not syncing: panic_on_warn set ... [ 104.857534][T10371] Shutting down cpus with NMI [ 104.857537][T10371] Kernel Offset: disabled